1. Slide 1 Phishing Emails CS 142 Lecture Notes: Security Attacks: Phishing

2. Slide 2 Legitimate: Extended Validation

3. CS 142 Lecture Notes: Security Attacks: PhishingSlide 3 Obviously Illegitimate http://rusprory.mass.hc.ru/old_site/update/index.php

4. CS 142 Lecture Notes: Security Attacks: PhishingSlide 4 Look-alike Characters

5. CS 142 Lecture Notes: Security Attacks: PhishingSlide 5 Legitimate Partners Can Look Fishy ???

6. CS 142 Lecture Notes: Security Attacks: PhishingSlide 6 International Character Sets ● What does this URL refer to? www.bank.com/accounts/login.php?q=me.badguy.cn ● This is a host name only! Chinese characters that look like "/", "?", and "="

7. CS 142 Lecture Notes: Security Attacks: PhishingSlide 7 Picture in picture

8. CS 142 Lecture Notes: Security Attacks: PhishingSlide 8 HTTPS Indicators HTTPHTTPS Firefox 10 IE 8 Chrome 17

9. CS 142 Lecture Notes: Security Attacks: PhishingSlide 9 Extended Validation Certificates ExtendedNormal HTTPS Firefox 10 IE 8 Chrome 17 Certificate Authority

10. CS 142 Lecture Notes: Security Attacks: PhishingSlide 10